Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - Malvineous

Pages: [1] 2 3 ... 6
Help / Re: ipcamra-002a
« on: July 02, 2013, 03:54:19 am »
The files in /bin /etc and so on are the base operating system files.  If there was a problem there, you wouldn't get as far as you have already.  So the fact you can FTP into your camera means it's only /tmp/eye that is bad.  The messages you are seeing in the log are just normal Linux kernel messages - they don't really say much on their own about the health of the firmware.

You should just be able to stick the standard firmware back in there, but that will still leave you looking for your unique board.dat.  You could try it anyway, maybe it's just H.264 or something that won't work without board.dat - nobody yet knows what it's actually for.

Hacking & Modding / Re: UART gives information about movement
« on: July 02, 2013, 03:45:03 am »
The MayGion camera PCBs have three connectors for limit switches.  One is three-wire and yes it's common + limit sense in both directions, the other two connectors are exactly the same signals but arranged as two 2-pin connectors, with the common line going to both connectors.

I don't know which pins they are hooked up to though - if they are connected to analogue input pins it's possible you could connect a pot to them instead to get more accurate measurement perhaps.  But in all my cases with normal security style IP cameras they are just connected to normal microswitches.

General Discussion / Re: Wanscam Authentication
« on: July 01, 2013, 06:40:08 am »
You don't say how you're passing the login credentials to decoder_control.cgi.  According to a quick Google for the filename, decoder_control.cgi?command=X&user=admin&pwd=pass should work, so have you tried that?

I don't think this is any secret.  Google showed up a bunch of documents with instructions about how to use this file, along with other programs which do make use of it already.

Hacking & Modding / Re: UART gives information about movement
« on: July 01, 2013, 06:36:03 am »
Have you seen a camera with sense pots?  All mine just have switches at the extremities of the pan position, and nothing at all for tilt.

One firmware I have actually pans all the way around until it hits the limit switch at power on, so that it can count the number of steps to a given position to allow presets.

But if you move the camera by hand this all gets thrown off since there aren't any position sensors.  So unless you're proposing to add some pots, I think reading the signals sent to the motor controllers would be the simplest.  (Reading the voltages on the motors themselves would work too, but then you'd need to handle higher voltages and multiple signals.  Some motor controllers accept pulses as input which would be much easier to read if that's the case here.)

Help / Re: ipcamra-002a
« on: June 30, 2013, 12:26:57 am »
Well the bad news is that some of the files you deleted were unique to your camera.  Check the other threads on this forum as someone recently had the same problem, but I don't think they were able to resurrect their camera.

I guess next time you will remember to take backups first ;-)  Don't throw your camera out though, hopefully Open IP Cam will eventually progress to the point where you can start experimenting with that as a replacement firmware.

But in the mean time, if you can get your camera working again you'll be the first, so don't forget to post instructions back here for the next person!

Help / Re: ipcamra-002a
« on: June 29, 2013, 07:06:09 pm »
You can download these from - first news item has a firmware download link.

General Discussion / Re: Take snapshot every X minutes
« on: June 29, 2013, 07:04:10 pm »
You can get a snapshot from most IP cam firmwares with a URL - check your manual or Google.  If you schedule a program to download this URL every 15 minutes, then you will get your snapshots.  Under Linux you can use cron and wget to achieve this.

Hacking & Modding / Re: UART gives information about movement
« on: June 29, 2013, 07:00:48 pm »
Hmm well, in that case I would probably tap into the lines that connect the camera's processor to the motor controllers.  Then you can monitor what commands are being sent to the motor controller.

It's a bit hard to offer any more advice without knowing why you need the information in the first place!  What is the microcontroller for?  What will it do?

uCLinux / Re: need help creating a custom BSP using buildroot
« on: June 29, 2013, 06:56:54 pm »
Sorry I haven't had a chance to get back to this for a couple of weeks.  I was hoping the buildroot team could tell me why buildroot was trying to compile binutils for the target when it's not required and I haven't selected it, but I haven't heard back.

I'm not sure that discarding those sections would be a solution - the error is complaining that the sections aren't there - so they must already be discarded somewhere.

I did change the linker script to keep those sections, but then I got the errors in my earlier post which have me pretty stumped.  Maybe the solution is to modify elf2flt so that it is able to cope if those sections are missing?

uCLinux / Re: XIP kernel questions
« on: June 29, 2013, 06:50:09 pm »
Thanks for the BusyBox binary.  The kernel gets further than before - it actually recognises it as BFLT and downloads the whole file and tries to run it, but then it can't run it and I get a kernel panic "not syncing: Attempted to kill init! exitcode=0x00000004"

It may have been compiled with the old ARM ABI as I think I am using the new one with this kernel.

Yes there is another repo for just the Linux kernel.  It's in the other thread, it was the first one I posted:  The buildroot repo downloads this one when the time comes to compile the kernel.

General Discussion / Re: No IR on camera? Any model?
« on: June 29, 2013, 06:20:34 pm »
There are quite a few of them, and all mine have an option that can switch off the IR LEDs permanently.  For the MayGion-manufacturered cameras, you must install the Android app to do it, you can't do it through the web interface.

uCLinux / Re: XIP kernel questions
« on: June 21, 2013, 11:01:07 pm »
I very much doubt the errors you are seeing are due to insufficient memory.  If this were the case you would see log messages about the kernel OOM (out-of-memory) handler killing random processes.

It is *much* more likely that the errors you are seeing are due to the CPU not having an MMU.  This means certain multitasking functions like fork() are unavailable, and AFAIK it is not possible to use the mmap() function either.  It is odd that you are getting a kernel panic though - normally it's just a userspace segfault when a program tries to use one of these functions (if that program can even be compiled in the first place.)

Have you tried compiling the git repo of my kernel port?  That might give you another data point as to whether it is the kernel or busybox at fault.  On that note, is there any chance you can post the BFLT BusyBox binary you are using? (maybe over in the other thread.)  I can't finish porting the rest of the kernel until I can boot it to userspace, and I can't do that because I'm still unable to produce any BFLT binaries.  Perhaps if I can run yours I will be able to finish the port.

Hacking & Modding / Re: UART gives information about movement
« on: June 21, 2013, 10:53:08 pm »
Oh sorry, I thought you were saying you were writing your own Android app!

Well one solution could be to create a TCP proxy which monitors the data between the camera and the app, and alerts you whenever a pan or tilt command passes through.

uCLinux / Re: XIP kernel questions
« on: June 20, 2013, 03:12:25 am »
Ah right - yes if there is a specific 'make xipImage' command then I would imagine that takes care of making an uncompressed image.  Otherwise you should still be able to find the uncompressed one somewhere in arch/arm/boot/

6MB is just the size of the kernel I was building, which didn't have a whole lot of drivers in it, but had a fair bit of everything else.  If you take out things you won't need (iptables firewall, IPv6, FAT filesystem for SD cards, etc.) then you can of course shrink it down further.  I'm not sure what the minimum size would be.  Also I think I may have been including a BusyBox binary in the initramfs, which would also make the kernel a bit larger but is kind of a requirement, unless you are using root-over-NFS.

It sounds like the start address is not the one you should be changing, given the effect it has had.  Which option are you actually setting?  Looking at the kernel config, under "Boot options", selecting "Kernel Execute-In-Place from ROM" reveals an option just below it called "XIP Kernel Physical Location".  I would think this is the place to set it?

But remember that at the end of the day, the only benefit of using a XIP kernel is to free up more RAM, so are you short of RAM to begin with?  If your running system has plenty of free memory, then all a XIP kernel is going to do is give you even more unused memory, at the expense of making the kernel less functional.

Hacking & Modding / Re: UART gives information about movement
« on: June 19, 2013, 04:14:52 am »
The UART is by far the most complicated solution, followed by microcontrollers to read motor signals.

Why can't your app just call the same AJAX functions the web interface uses to pan/tilt the camera?

Pages: [1] 2 3 ... 6